$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0081c71d-aab3-37d1-83de-abafe8ea92e1.roa File: 0081c71d-aab3-37d1-83de-abafe8ea92e1.roa (raw, json) Hash identifier: 8yX1UENB7rLT92lLCjNLmTViwcn/gREWjGA3XBcJN9E= Subject key identifier: 74:CB:7C:93:86:FE:96:65:B9:CE:87:67:F1:47:3B:84:A3:17:F4:04 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581115878900547C8C51DE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0081c71d-aab3-37d1-83de-abafe8ea92e1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:11:58:78:90:05:47:c8:c5:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=362f77d5-821e-4b35-aa30-198c3a603af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:5b:89:dd:a3:ab:85:7d:ae:28:14:01:b7: bf:81:ad:38:dd:d0:df:fe:49:c1:93:cf:88:85:c6: 43:01:f8:de:01:f9:c2:ac:d3:74:78:6c:0b:f5:63: 48:bd:db:2c:83:5f:cd:ab:45:f5:af:f9:9c:fe:2c: 24:85:d3:0d:4a:ed:3e:93:08:0d:93:8d:84:67:e3: ea:fd:a4:7a:18:9e:b1:c2:c0:36:48:97:ee:50:2f: 97:b9:66:01:ce:5c:b8:86:c8:a7:b5:cb:ac:de:dd: a0:c2:3e:87:ca:19:39:c5:ab:96:ee:f2:e1:39:ac: 78:6e:64:79:91:16:2c:27:06:b3:1e:73:d5:cc:be: f2:dc:f8:54:2a:fa:12:4c:0e:bb:ff:54:a4:b9:36: 2c:ba:20:18:fe:56:e8:de:05:41:bf:13:fb:a2:e0: 0a:01:5f:fc:7d:3d:cc:75:8c:83:e9:d3:88:f4:15: 32:b9:b6:87:fb:40:25:02:9b:73:49:34:98:86:66: 50:93:29:53:82:89:d1:c1:a2:91:9f:19:62:42:b1: 43:17:bf:cd:94:e1:b7:b0:7f:d8:29:48:ff:9d:fe: fb:6e:30:9c:5a:7c:52:67:49:16:b7:cf:19:56:70: e6:e5:e8:1f:3d:b9:4c:af:9d:4b:c7:ae:8f:2a:2e: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CB:7C:93:86:FE:96:65:B9:CE:87:67:F1:47:3B:84:A3:17:F4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0081c71d-aab3-37d1-83de-abafe8ea92e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8c:5e:c1:e9:df:ca:0c:c4:4c:e9:58:d3:c3:c9:6a:f1:a3: 61:55:ca:cf:67:2a:77:88:1d:44:13:67:08:2c:95:be:59:1e: c2:d2:3a:32:bb:33:d6:e6:bf:64:e4:66:ca:e5:ed:5f:4e:ee: 6b:64:84:ac:dc:22:37:12:88:81:37:38:d3:3a:94:39:df:34: 17:5e:3c:09:c6:21:7c:c3:56:45:68:73:ad:1b:ca:7d:1a:76: a6:4b:dc:38:6e:5b:5b:50:e1:76:41:61:68:ba:13:2b:7f:3c: 6b:2c:c5:05:b4:5f:2f:4b:cc:2d:6a:97:49:61:33:e3:cd:80: 67:fb:df:f8:18:47:1a:af:20:7d:45:ba:3e:7a:64:9d:89:58: 3f:71:c6:f6:51:d6:89:ba:de:75:df:fc:e9:6f:e1:4d:7f:bc: bc:b5:d8:de:a3:cb:85:b6:89:f4:d7:38:ae:57:42:5c:ea:8d: 13:3f:28:c2:fe:96:f7:21:3a:c8:f6:a5:3d:fe:ce:12:ad:3b: 11:f4:12:13:42:5c:dc:40:ee:f4:5e:b7:1d:7b:31:12:a4:32: c4:47:af:37:66:18:ae:e6:10:79:0b:a1:aa:26:07:46:d4:94: 0a:72:cd:75:c3:5b:96:84:d8:31:a5:dc:a7:3d:bc:a0:3e:2c: c4:ff:81:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRFYeJAFR8jFHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzYyZjc3ZDUtODIxZS00YjM1LWFhMzAtMTk4YzNhNjAzYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjVbid2jq4V9rigUAbe/ga043dDf/knBk8+I hcZDAfjeAfnCrNN0eGwL9WNIvdssg1/Nq0X1r/mc/iwkhdMNSu0+kwgNk42EZ+Pq /aR6GJ6xwsA2SJfuUC+XuWYBzly4hsintcus3t2gwj6Hyhk5xauW7vLhOax4bmR5 kRYsJwazHnPVzL7y3PhUKvoSTA67/1SkuTYsuiAY/lbo3gVBvxP7ouAKAV/8fT3M dYyD6dOI9BUyubaH+0AlAptzSTSYhmZQkylTgonRwaKRnxliQrFDF7/NlOG3sH/Y KUj/nf77bjCcWnxSZ0kWt88ZVnDm5egfPblMr51Lx66PKi7lYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTLfJOG/pZluc6HZ/FHO4SjF/QEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDA4MWM3MWQtYWFiMy0z N2QxLTgzZGUtYWJhZmU4ZWE5MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeMXsHp38oMxEzpWNPDyWrxo2FVys9nKneIHUQTZwgslb5ZHsLSOjK7 M9bmv2TkZsrl7V9O7mtkhKzcIjcSiIE3ONM6lDnfNBdePAnGIXzDVkVoc60byn0a dqZL3DhuW1tQ4XZBYWi6Eyt/PGssxQW0Xy9LzC1ql0lhM+PNgGf73/gYRxqvIH1F uj56ZJ2JWD9xxvZR1om63nXf/Olv4U1/vLy12N6jy4W2ifTXOK5XQlzqjRM/KML+ lvchOsj2pT3+zhKtOxH0EhNCXNxA7vRetx17MRKkMsRHrzdmGK7mEHkLoaomB0bU lApyzXXDW5aE2DGl3Kc9vKA+LMT/gTA= -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:54 2025 by rpki-client